CVE-2016-5637

The restoretqbpixels function in libbpg 0.9.5 through 0.9.7 mishandles the transquantbypassenableflag value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write via a crafted BPG image, related to a "type confusion" issue...

libbpg Remote Code Execution Vulnerability

libbpg is a new image format. A remote code execution vulnerability exists in libbpg versions 0.9.5 through 0.9.7, which can be exploited by an attacker to execute arbitrary code in an affected application run by a user. It could also result in a denial of service...

libbpg contains a type confusion vulnerability that leads to out of bounds write

Overview libbpg is a library for the BPG graphics format. libbpg 0.9.5 through 0.9.7 may allow a crafted file to write out-of-bounds, which may lead to denial of service or arbitrary code execution. Description CWE-787: Out-of-bounds Write - CVE-2016-5637According to the reporter, improper checki...